Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/ba711ba1-3e0a-374c-a397-d36ec265248d.roa
File: ba711ba1-3e0a-374c-a397-d36ec265248d.roa (raw, json)
Hash identifier: 1CrznZqPMAXSBifUhSi1El6JJvFYPdiwoYsWjlfUjhw=
Subject key identifier: CE:B2:28:A9:11:B0:AA:71:BB:67:C9:08:F9:97:45:57:10:70:BB:B5
Certificate issuer: /CN=9a52f880-7957-4bb9-b30a-78f30c289eb1
Certificate serial: 010D0C9F43285848143A807C38AA8E1123A83980
Authority key identifier: A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/ba711ba1-3e0a-374c-a397-d36ec265248d.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 32159
IP address blocks: 23.153.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:80:7c:38:aa:8e:11:23:a8:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a52f880-7957-4bb9-b30a-78f30c289eb1
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=4d9d9ac5-9a93-49aa-b899-a070e3b9bcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:48:ba:22:98:1f:1f:0f:7c:23:c8:54:34:
42:e3:16:4c:b4:89:da:91:f6:f1:76:98:e0:9c:04:
84:18:6b:e9:ae:47:8d:e1:2c:90:36:bb:db:14:db:
b4:09:34:c1:15:f3:33:ef:d2:fc:b1:5d:3a:3b:99:
f8:8d:77:03:3a:b0:1e:de:3b:f7:7a:af:c8:9f:e0:
bf:5b:7d:40:f5:42:01:89:3e:fc:86:3e:44:b8:0e:
89:8f:1e:88:d1:68:af:8a:a6:c3:7d:f4:33:a4:d1:
77:21:e9:08:4d:9a:cf:0c:6e:22:44:1c:f2:86:ed:
a6:b3:ab:8d:09:6d:9f:d1:5c:a5:81:5f:16:9b:68:
86:23:1b:2f:bf:a2:5a:bb:c3:30:f6:b9:6b:77:0a:
c2:8b:7a:76:bb:a7:d5:40:85:81:56:52:98:24:60:
d9:58:e6:b7:6d:b8:24:7e:c2:d0:e2:21:e5:13:6a:
c8:c7:d7:68:ff:19:97:99:45:07:f9:d0:c6:64:69:
72:bb:98:03:66:e8:ad:41:ef:8e:45:ac:5f:ba:7c:
fb:99:b8:ed:27:6d:b6:72:51:cb:88:4a:6b:04:7b:
c7:0a:56:6e:d4:26:8c:0e:2e:6d:18:c9:21:1a:c4:
ab:5c:ae:28:4a:43:22:57:9c:22:0e:89:bb:50:b9:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B2:28:A9:11:B0:AA:71:BB:67:C9:08:F9:97:45:57:10:70:BB:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/ba711ba1-3e0a-374c-a397-d36ec265248d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl
X509v3 Authority Key Identifier:
keyid:A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.153.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:77:7c:ef:a8:94:2e:fd:86:4f:26:75:c1:73:74:47:5d:67:
3f:76:8a:ef:e2:6e:02:88:b8:0a:65:6e:79:f1:f2:eb:f9:8a:
c8:bd:6b:df:e0:9f:f2:0d:df:b5:92:bb:f0:62:99:2d:06:28:
79:63:b3:b3:55:f3:e5:99:62:1e:f2:90:99:27:ce:d5:7b:42:
65:5c:06:ba:d6:f4:7d:5c:dc:ab:5b:1c:ce:30:2b:5c:30:08:
4c:9c:60:d1:eb:ca:39:39:9b:a7:e5:60:3b:12:ae:29:dc:94:
f4:e2:d6:8c:2c:97:a4:fa:e8:c0:47:35:03:c1:fc:73:db:b0:
b6:03:69:9e:60:73:f7:40:94:42:99:64:17:bc:21:cc:35:7e:
9c:0f:ae:56:e7:3f:8c:11:4e:6a:3b:7b:8c:a6:f5:27:ce:0e:
3b:34:23:c4:44:ff:dc:40:87:34:3b:42:c3:70:70:4a:08:e5:
f1:d8:3d:00:48:f5:3f:07:17:ce:e3:53:ce:e0:c4:7c:32:fe:
9a:57:75:47:b9:e3:67:f0:b4:ec:34:f6:3d:9a:bd:6d:b3:a6:
db:e5:a2:db:47:44:56:e4:4e:ef:58:6b:d4:b0:40:74:4d:e3:
a1:85:e9:9b:c9:73:51:b7:76:e9:62:a7:06:bc:19:6b:32:08:
8a:ed:5c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:34:30 2025 by rpki-client